Knowledge center

What is SAQ C?

SAQ C applies to certain merchants with internet-connected payment applications and no electronic account-data storage, subject to all eligibility criteria.

Why it matters

Connected, integrated or storing applications require careful scope review.

What to confirm

Payment application
Internet and network connections
Electronic storage

Official PCI DSS documentation · PCI DSS v4.0.1 · reviewed 2026-07-31

This content is informational and is not legal advice. The applicable route and validation method depend on the operation and requesting party.

Identify your likely route Back to all questions